CVE-2023-41259

Best Practical Request Tracker RT before 4.4.7 and 5.x before 5.0.5 allows Information Disclosure via fake or spoofed RT email headers in an email message or a mail-gateway REST API call...

Information Disclosure

request-tracker4 is vulnerable to Information Disclosure. The vulnerability occurs due to request tracker accepting unvalidated RT email headers in incoming emails, resulting in disclosure of confidential information...